漏洞 - 第30页-OStack程序员社区-中国程序员成长平台

OStack程序员社区-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2015-8031

Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：597 | 回复：0
CVE漏洞

CVE-2022-34875

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：992 | 回复：0
CVE漏洞

CVE-2022-34874

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1088 | 回复：0
CVE漏洞

CVE-2022-34873

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：776 | 回复：0
CVE漏洞

CVE-2022-28683

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：767 | 回复：0
CVE漏洞

CVE-2022-28682

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：735 | 回复：0
CVE漏洞

CVE-2022-28681

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：773 | 回复：0
CVE漏洞

CVE-2022-28680

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：696 | 回复：0
CVE漏洞

CVE-2022-28679

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：756 | 回复：0
CVE漏洞

CVE-2022-28678

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：982 | 回复：0
CVE漏洞

CVE-2022-28677

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1063 | 回复：0
CVE漏洞

CVE-2022-28676

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：695 | 回复：0
CVE漏洞

CVE-2022-28675

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：866 | 回复：0
CVE漏洞

CVE-2022-28674

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：760 | 回复：0
CVE漏洞

CVE-2022-28673

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1032 | 回复：0
CVE漏洞

CVE-2022-28672

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：697 | 回复：0
CVE漏洞

CVE-2022-28671

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1221 | 回复：0
CVE漏洞

CVE-2022-28670

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：640 | 回复：0
CVE漏洞

CVE-2022-28669

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1205 | 回复：0
CVE漏洞

CVE-2022-26120

Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may all ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：556 | 回复：0
CVE漏洞

CVE-2022-26118

A privilege chaining vulnerability in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3 may allow a local and authenticated attacker with a restricted shell to esc ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：952 | 回复：0
CVE漏洞

CVE-2022-26117

An empty password in configuration file vulnerability in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 an ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：977 | 回复：0
CVE漏洞

CVE-2022-23438

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in FortiOS version 7.0.5 and prior and 6.4.9 and prior may allow an unauthenticated remot ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：636 | 回复：0
CVE漏洞

CVE-2022-22445

An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：689 | 回复：0
CVE漏洞

CVE-2021-41031

A relative path traversal vulnerability in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：670 | 回复：0
CVE漏洞

CVE-2021-38868

IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transm ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：630 | 回复：0
CVE漏洞

CVE-2021-29799

IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 2037 ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：606 | 回复：0
CVE漏洞

CVE-2021-29790

IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：642 | 回复：0
CVE漏洞

CVE-2021-29788

IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：562 | 回复：0
CVE漏洞

CVE-2021-22131

A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 a ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：509 | 回复：0
CVE漏洞

CVE-2022-32387

In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：575 | 回复：0
CVE漏洞

CVE-2022-2444

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in versions up to, and includin ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：611 | 回复：0
CVE漏洞

CVE-2022-2443

The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.2. This is due to missing nonce protection on the FreemindOptions() function ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：872 | 回复：0
CVE漏洞

CVE-2022-2437

The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the 'fts_url' parameter in versions up to, and including ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：609 | 回复：0
CVE漏洞

CVE-2022-2435

The AnyMind Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1. This is due to missing nonce protection on the createDOMStructure() function f ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1100 | 回复：0
CVE漏洞

CVE-2022-2224

The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.0.0.27 due to failure to properly check for the existence of a nonce in the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1736 | 回复：0
CVE漏洞

CVE-2022-2223

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewi ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：1331 | 回复：0
CVE漏洞

CVE-2022-2117

The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wall REST-API endpoint which provides unauthenticated users wi ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：565 | 回复：0
CVE漏洞

CVE-2022-2108

The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and review modification due to missing capability checks and improper nonce checks in ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：586 | 回复：0
CVE漏洞

CVE-2022-2101

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file` parameter in versions up to, and including, 3.2.46 due to insufficient input sanitization and outp ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：566 | 回复：0